Practice Exam 3

Click on the Answer button for the correct answer and its explanation.

If this practice exam has been helpful to you please share it with others.

You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system. Solution: You use the PowerApps portal. Does this meet the goal?
- A. Yes.
- B. No.
Answer

Correct Answer: No.
You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system. Solution: You use the Azure portal. Does this meet the goal?
- A. Yes.
- B. No.
Answer

Correct Answer: Yes.
Which Azure service provides a set of version control tools to manage code?
- A. Azure Repos.
- B. Azure DevTest Labs.
- C. Azure Storage.
- D. Azure Cosmos DB.
Answer

Correct Answer: Azure Repos.
Your company plans to automate the deployment of servers to Azure. Your manager is concerned that you may expose administrative credentials during the deployment. You need to recommend an Azure solution that encrypts the administrative credentials during the deployment. What should you include in the recommendation?
- A. Azure Key Vault.
- B. Azure Information Protection.
- C. Azure Security Center.
- D. Azure Multi-Factor Authentication (MFA).
Answer

Correct Answer: Azure Key Vault.
You plan to deploy several Azure virtual machines. You need to control the ports that devices on the Internet can use to access the virtual machines. What should you use?
- A. a Network Security Group (NSG).
- B. an Azure Active Directory (Azure AD) role.
- C. an Azure Active Directory group.
- D. an Azure key vault.
Answer

Correct Answer: a Network Security Group (NSG).
Azure Germany can be used by legal residents of Germany only.
- A. No change is needed.
- B. Only enterprises that are registered in Germany.
- C. Only enterprises that purchase their azure licenses from a partner based in Germany.
- D. Any user or enterprise that requires its data to reside in Germany.
Answer

Correct Answer: Any user or enterprise that requires its data to reside in Germany.
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the lnternet over HTTP. Solution. You modify a Network Security Group (NSG). Does this meet the goal?
- A. Yes.
- B. No.
Answer

Correct Answer: Yes.
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure firewall. Does this meet the goal?
- A. Yes.
- B. No.
Answer

Correct Answer: Yes.
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure Traffic Manager profile. Does this meet the goal?
- A. Yes.
- B. No.
Answer

Correct Answer: No.
Which two types of customers are eligible to use Azure Government to develop a cloud solution?
- A. A Canadian government contractor.
- B. A European government contractor.
- C. A United States government entity.
- D. A United States government contractor.
- E. A European govemment entity.
Answer

Correct Answer: A United States government entity.
You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password. Which Azure service should you use?
- A. Azure AD Connect Health.
- B. Azure AD Privileged Identity Management.
- C. Azure Advanced Threat Protection (ATP).
- D. Azure AD ldentity Protection.
Answer

Correct Answer: Azure AD ldentity Protection.
Your company plans to deploy several web servers and several database servers to Azure. You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers. What should you include in the recommendation?
- A. Network Security Groups (NSGs).
- B. Azure Service Bus.
- C. A local network gateway.
- D. A route filter.
Answer

Correct Answer: Network Security Groups (NSGs).
To what should an application connect to retrieve security tokens?
- A. An Azure Storage account.
- B. Azure Active Directory (Azure AD).
- C. A certificate store.
- D. An Azure key vault.
Answer

Correct Answer: Azure Active Directory (Azure AD).
Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks?
- A. Azure Firewall.
- B. An application security group.
- C. Azure DDOS protection.
- D. A Network Security Group (NSG).
Answer

Correct Answer: Azure Firewall.
Which Azure service should you use to store certificates?
- A. Azure Security Center.
- B. An Azure Storage account.
- C. Azure Key Vault.
- D. Azure Information Protection.
Answer

Correct Answer: Azure Key Vault.
You have a resource group named RG1. You plan to create virtual networks and app services in RG1. You need to prevent the creation of virtual machines only in RG1. What should you use?
- A. A lock.
- B. An Azure role.
- C. A tag.
- D. An Azure policy.
Answer

Correct Answer: An Azure policy.
What can Azure Information Protection encrypt?
- A. Network traffic.
- B. Documents and email messages.
- C. An Azure Storage account.
- D. An Azure SQL database.
Answer

Correct Answer: Documents and email messages.
From [Azure Monitor], you can view which user turned off a specific virtual machine during the last 14 days.
- A. No change is needed.
- B. Azure Event Hubs.
- C. Azure Activity Log.
- D. Azure Service Health.
Answer

Correct Answer: Azure Activity Log.
Your company has an Azure subscription that contains resources In several regions. A company policy states that administrators must only be allowed to create additional Azure resources in a region in the country where their office is located. You need to create the Azure resource that must be used to meet the policy requirement. What should you create?
- A. A read-only lock.
- B. An Azure policy.
- C. A management group.
- D. A reservation.
Answer

Correct Answer: An Azure policy.
From [Azure Cloud Shell], you can track your company regulatory standards and regulations, such as ISO 27001.
- A. No change is needed.
- B. The Microsoft Cloud Partner Portal.
- C. Compliance Manager.
- D. The Trust Center.
Answer

Correct Answer: Compliance Manager.
You need to configure an Azure solution that meets the following requirements: Secures websites from attacks. Generates reports that contain details of attempted attacks. What should you include in the solution?
- A. Azure Firewall.
- B. A Network Security Group (NSG).
- C. Azure Information Protection.
- D. DDoS protection.
Answer

Correct Answer: DDoS protection.
You attempt to create several managed Microsoft SQL Server instances in an Azure environment and receive a message that you must increase your Azure subscription limits. What should you do to increase the limits?
- A. Create a service health alert.
- B. Upgrade your support plan.
- C. Modify an Azure policy.
- D. Create a new support request.
Answer

Correct Answer: Create a new support request.
Your company has 10 offices. You plan to generate several billing reports from the Azure portal. Each report will contain the Azure resource utilization of each office. Which Azure Resource Manager feature should you use before you generate the reports?
- A. Tags.
- B. Templates.
- C. Locks.
- D. Policies.
Answer

Correct Answer: Tags.
Your company plans to migrate to Azure. The company has several departments. All the Azure resources used by each department will be managed by a department administrator. What are two possible techniques to segment Azure for the departments? Each correct answer presents a complete solution.
- A. Multiple subscriptions.
- B. Multiple Azure Active Directory (Azure AD) directories.
- C. Multiple regions.
- D. Multiple resource groups.
Answer

Correct Answer: Multiple subscriptions.
In which Azure support plans can you open a new support request?
- A. Premier and Professional Direct only.
- B. Premier, Professional Direct, and Standard only.
- C. Premier, Professional Direct, Standard, and Developer only.
- D. Premier, Professional Direct, Standard, Developer, and Basic.
Answer

Correct Answer: Premier, Professional Direct, Standard, and Developer only.
What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines?
- A. Uptime.
- B. Feature avalability.
- C. Bandwidth.
- D. Performance.
Answer

Correct Answer: Uptime.
Your company plans to purchase an Azure subscription. The company support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Basic support plan. Does this meet the goal?
- A. Yes.
- B. No.
Answer

Correct Answer: No.
Your company plans to request an architectural review of an Azure environment from Microsoft. The company currently has a Basic support plan. You need to recommend a new support plan for the company. The solution must minimize costs. Which support plan should you recommend?
- A. Premier.
- B. Developer.
- C. Professional Direct.
- D. Standard.
Answer

Correct Answer: Premier.
What is required to use Azure Cost Management?
- A. A Dev/Test subscription.
- B. Software Assurance.
- C. An Enterprise Agreement (EA).
- D. A pay-as-you-go subscription.
Answer

Correct Answer: A pay-as-you-go subscription.
Your Azure trial account expired last week. You are now unable to [create additional Azure Active Directory (Azure AD) user accounts].
- A. No change is needed.
- B. Start an existing Azure virtual machine.
- C. Access your data stored in Azure.
- D. Access the Azure portal.
Answer

Correct Answer: Start an existing Azure virtual machine.
Your company plans to purchase an Azure subscription, The company support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Premier support plan. Does this meet the goal?
- A. Yes.
- B. No.
Answer

Correct Answer: Yes.
Your company has 10 departments. The company plans to implement Azure environment. You need to ensure that each department can use a different payment option for the Azure services it consumes. What should you create for each department?
- A. A reservation.
- B. A subscription.
- C. A resource group.
- D. A container instance.
Answer

Correct Answer: A subscription.
Which statement accurately describes the Modern Lifecycle Policy for Azure services?
- A. Microsoft provides mainstream support for a service for five years.
- B. Microsoft provides a minimum of 12 months notice before ending support for a service.
- C. After a service is made generally available, Microsoft provides support for the service for a minimum of four years.
- D. When a service is retired, you can purchase extended support for the service for up to five years.
Answer

Correct Answer: Microsoft provides a minimum of 12 months notice before ending support for a service.
You can use Advisor recommendations in Azure to send email alerts when the cost of the current billing Azure subscription exceeds a specified limit.
- A. No change is needed.
- B. Access control (LAM).
- C. Budget alerts.
- D. Compliance.
Answer

Correct Answer: Budget alerts.
To implement a hybrid cloud model, a company must first have a private cloud.
- A. Yes.
- B. No.
Answer

Correct Answer: No.
A company can extend the computing resources of its internal network by using a hybrid cloud.
- A. Yes.
- B. No.
Answer

Correct Answer: Yes.
In a public cloud model, only guest users at your company can access the resources in the cloud.
- A. Yes.
- B. No.
Answer

Correct Answer: No.
You have an on-premises network that contains several servers. You plan to migrate all the servers to Azure. You need to recommend a solution to ensure that some of the servers are available if a single Azure data center goes offline for an extended period. What should you include in the recommendation?
- A. Fault tolerance.
- B. Elasticity.
- C. Scalability.
- D. Low latency.
Answer

Correct Answer: Fault tolerance.
An organization that hosts its infrastructure [in a private cloud] can close its data center.
- A. No change is needed.
- B. In a hybrid cloud.
- C. In the public cloud.
- D. On a Hyper-V host.
Answer

Correct Answer: In the public cloud.
What are two characteristics of the public cloud?
- A. Dedicated hardware.
- B. Unsecured connections.
- C. Limited storage.
- D. Metered pricing.
- E. Self-service management.
Answer

Correct Answer: Metered pricing.
Your company plans to migrate all its data and resources to Azure. The company migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. Solution: You create an Azure App Service and Azure virtual machines that have Microsoft SQL Server installed. Does this meet the goal?
- A. Yes.
- B. No.
Answer

Correct Answer: No.
Your company hosts an accounting application named App1 that is used by all the customers of the company. App1 has low usage during the first three weeks of each month and very high usage during the last week of each month. Which benefit of Azure Cloud Services supports cost management for this type of usage pattern?
- A. High availability.
- B. High latency.
- C. Elasticity.
- D. Load balancing.
Answer

Correct Answer: Elasticity.
You plan to deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single data center fails. Solution: You deploy the virtual machines to two or more scale sets. Does this meet the goal?
- A. Yes.
- B. No.
Answer

Correct Answer: No.
You plan to provision Infrastructure as a Service (IaaS) resources in Azure. Which resource is an example of IaaS?
- A. An Azure web app.
- B. An Azure virtual machine.
- C. An Azure logic app.
- D. An Azure SQL database.
Answer

Correct Answer: An Azure virtual machine.
A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each week. Thirty of the virtual machines run Windows Server 2016 and 20 of the virtual machines run Ubuntu Linux. You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines. What should you recommend?
- A. Azure Reserved Virtual Machines (VM) Instances.
- B. Azure virtual machine scale sets.
- C. Azure DevTest Labs.
- D. Microsoft Managed Desktop.
Answer

Correct Answer: Azure DevTest Labs.
One of the benefits of Azure SQL Data Warehouse is that [high availability] is built into the platform.
- A. No change is needed.
- B. Automatic scaling.
- C. Data compression.
- D. Versioning.
Answer

Correct Answer: No change is needed.
You need to identify the type of failure for which an Azure Availability Zone can be used to protect access to Azure services. What should you identify?
- A. A physical server failure.
- B. An Azure region failure.
- C. A storage failure.
- D. An Azure data center failure.
Answer

Correct Answer: An Azure data center failure.
An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs macOS and has PowerShell Core 6.0 installed. Does this meet the goal?
- A. Yes.
- B. No.
Answer

Correct Answer: Yes.
You have an Azure environment that contains 10 virtual networks and 100 virtual machines. You need to limit the amount of inbound traffic to all the Azure virtual networks. What should you create?
- A. One application security group (ASG).
- B. 10 virtual network gateways.
- C. 10 Azure ExpressRoute circuits.
- D. One Azure firewall.
Answer

Correct Answer: One Azure firewall.
You have an on-premises application that sends email notifications automatically based on a rule. You plan to migrate the application to Azure. You need to recommend a serverless computing solution for the application. What should you include in the recommendation?
- A. A web app.
- B. A server image in Azure Marketplace.
- C. A logic app.
- D. An API app.
Answer

Correct Answer: A logic app.

Please feel free to contact us if any information is inaccurate or if any answers need correction.

Exam List

Microsoft Azure Fundamentals

Practice Exam 3

If you are studying for Microsoft Azure Fundamentals Exam, this guide will help you with quick revision before the exam. it can use as study notes for your preparation.

Practice Exam 3